RigAI Tech Pvt. Ltd. ("RigAI", "we", "our" or "us") is committed to protecting personal information processed through our website, products and services.
This Policy explains how we handle information in connection with our website and cloud services, including SynSok, GX, VoiceStack, SOS, PMS integrations and other services introduced from time to time (the "Services").
RigAI serves businesses — hotels, resorts, hotel groups, restaurants, travel companies and other enterprises. Our Services may process information about employees, customers and guests on behalf of those organisations.
1. Information We Collect
What we process depends on the Services used and how a customer configures them.
Business and account information — name, job title, organisation, business email, telephone, business address, account credentials, billing and tax details, and configuration preferences.
Technical and usage information — IP address, browser and device details, operating system, authentication and access records, activity logs, diagnostics, and security and audit data.
Customer and guest information — where a customer enables it: guest name, room number, reservation ID, stay dates, preferences, loyalty and stay history, chat and voice conversations, AI-generated summaries, and service requests. The exact scope depends on the customer's configuration and enabled integrations.
Customer-provided content — menus, images, operational information, policies and other business content supplied to configure and run the Services.
2. How We Use Information
We use information as necessary to:
- Provide, operate and maintain the Services
- Process customer and guest interactions, including voice and text conversations
- Deliver AI-powered functionality
- Connect with customer-authorised third-party systems
- Authenticate users and manage accounts
- Provide customer and technical support
- Monitor and improve reliability, performance and security
- Detect, prevent and investigate misuse or security incidents
- Comply with applicable legal and regulatory requirements
- Protect the rights, property and safety of RigAI, our customers and others
RigAI does not sell personal information.
3. AI Processing
Our Services use artificial intelligence and machine learning for conversational assistance, information retrieval, summarisation, automation and voice interactions.
We may use third-party AI technology providers, including OpenAI and Google. Information is transmitted to such providers only as necessary to deliver the relevant Services, and subject to appropriate contractual and security safeguards.
RigAI does not use Customer Data or Guest Data to train its own AI models unless expressly agreed with the customer in writing.
AI-generated responses may not always be accurate or complete. Customers remain responsible for how AI-generated information is used in their operations. We may change or add technology providers where reasonably necessary to operate, secure, improve or scale the Services.
4. Voice and Conversation Data
VoiceStack and voice-enabled features within other RigAI products may process voice communications. Where enabled:
- Voice recording is configurable by the customer
- Recordings may be retained by RigAI as part of providing the Services
- Transcripts may be generated and retained
- AI-generated summaries or other derived information may be created
Customers are responsible for configuring voice features appropriately and for obtaining any notices, consents or permissions required by law before recording or processing conversations.
5. Customer Data and Ownership
Customers retain ownership of the information and content they submit to or process through the Services ("Customer Data"), including Guest Data processed on their behalf. RigAI does not acquire ownership of Customer Data by providing the Services.
RigAI retains all rights, title and interest in its platform, software and source code, products and technology, workflows and automation, AI orchestration, prompts and system logic, documentation, trademarks and branding, and other proprietary intellectual property.
We process Customer Data only as necessary to provide, secure, maintain and improve the Services, to comply with law, or as otherwise authorised by the customer.
6. Third-Party Integrations and Service Providers
To deliver functionality requested by customers, we may integrate with or use:
- Property management systems such as Oracle OPERA Cloud, Cloudbeds and Mews
- WhatsApp and other communication platforms
- Telephony providers such as Twilio
- Email and messaging services
- Cloud infrastructure providers
- AI technology providers
- Authentication and other enterprise technology services
Information is shared with such providers only where reasonably necessary to provide the Services, operate an integration, follow customer instructions or meet legal requirements. Third-party services may have their own privacy policies governing information they process directly.
7. Data Storage and Retention
We use cloud infrastructure and technology providers to store and process information, currently including Google Cloud and Supabase, depending on the product involved.
We retain information only as long as reasonably necessary for the purposes described here, contractual requirements, legitimate business purposes or applicable law.
Unless otherwise agreed or required by law, Customer Data is generally deleted within 90 days following termination of the applicable Services. Customers may request earlier deletion where the Service supports it.
We maintain backup and recovery processes, so information may remain temporarily in backup systems after deletion from active systems, before being securely overwritten or removed.
8. Data Security
RigAI implements commercially reasonable technical, organisational and administrative safeguards designed to protect information against unauthorised access, alteration, disclosure, loss or destruction. These include access controls, authentication, role-based access, logging and monitoring, secure cloud infrastructure, backup and recovery procedures, and controlled access to customer information.
We review and improve our security practices as our Services evolve. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.
9. International Processing
Because we serve customers across multiple regions and use global technology providers, information may be processed or stored outside the country where it was collected. Where required by law, we implement appropriate safeguards for international transfers.
10. Privacy Rights
Depending on applicable law, individuals may have the right to request access, correction, deletion or restriction of processing; to object to certain processing; to request data portability; and to withdraw consent where processing relies on it.
Where RigAI processes information on behalf of a customer, that customer is generally responsible for responding to such requests. We provide reasonable assistance where required under the customer relationship or applicable law, including requirements relating to the right to erasure.
11. Children's Privacy
The Services are designed for business and enterprise use and are not directed at children. RigAI does not knowingly collect personal information directly from children. Where a customer processes information relating to minors, that customer is responsible for ensuring the processing complies with applicable law.
12. Cookies and Similar Technologies
Our website uses cookies and similar technologies for essential functionality, security, analytics, performance and user preferences. Where required, we provide mechanisms to manage preferences. See our Cookie Policy for details.
13. Changes to This Policy
We may update this Policy to reflect changes to our Services, technology, legal requirements or privacy practices. When we make material changes, we update the "Last Updated" date above and, where appropriate, provide additional notice.
14. Contact Us
Privacy, data protection and compliance: compliance@rigai.io
General support and service enquiries: support@rigai.io
RigAI Tech Pvt. Ltd., India